https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T03:42:57.683247+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-12537 CVE-2026-12537 — Unauthenticated Remote Code Execution in Gemini CLI CI/CD Workflows 2026-10-10T03:42:57.698519+00:00

Affected: Google Cloud Gemini CLI, Google Cloud run-gemini-cli GitHub Action

Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.